PyPI/keras CVE-2025-9906: high 7.3, EPSS 0.20%

The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True.

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2025-76
• https://github.com/keras-team/keras/pull/21429
• https://github.com/advisories/GHSA-36fq-jgmw-4r9c

CVE-2025-9906 · published 2025-09-19T09:15:36.353Z · modified 2026-06-10T17:01:52.099728122Z · JSON